Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
File:                     pjx_KbiD9LPCQ22WPchTKhpjTMo.mft (raw, json)
Hash identifier:          0X6AQaeCaWf2DKDO2EtjhqkuI2lL6SqE0KLUf/8mBVI=
Subject key identifier:   E4:88:E1:C6:AC:01:40:D9:E5:B5:43:4D:C1:58:4C:45:0B:9E:EF:E0
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Certificate issuer:       /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial:       01962E99987641004CDF12C542C8AAA6E3B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: pjx_KbiD9LPCQ22WPchTKhpjTMo.crl (hash: doiFTKQPEYiKvKKrhcql30QihtnTsCrq4unXwIaOCVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:98:76:41:00:4c:df:12:c5:42:c8:aa:a6:e3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=e488e1c6ac0140d9e5b5434dc1584c450b9eefe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:53:1c:59:a6:78:cb:00:99:e3:51:21:fc:53:
                    27:88:da:5a:0a:17:eb:6c:b8:9f:79:2d:71:b2:69:
                    57:da:60:d5:29:e5:bc:c9:04:1b:ef:0a:4a:b7:07:
                    dd:96:cb:94:ab:b8:45:39:49:89:91:73:b8:ab:a0:
                    68:a9:0b:44:12:7f:90:38:8b:00:a7:eb:81:7a:0b:
                    69:aa:87:6a:01:cf:e8:24:aa:97:96:83:60:fb:c2:
                    e5:01:60:8a:1f:9f:60:d4:04:0d:54:4e:3a:8e:57:
                    ee:26:38:2c:26:33:e4:a2:a8:b0:99:6c:6f:8a:c4:
                    bf:04:3c:c4:7c:c1:ff:31:f5:50:23:03:9e:3f:17:
                    34:54:f7:fa:57:73:98:94:63:06:3b:1a:34:d9:09:
                    be:b1:75:0b:92:59:11:95:cd:67:16:67:9c:d2:23:
                    41:89:8c:37:41:5f:6e:7e:88:19:5c:c3:98:e2:63:
                    7b:14:41:34:6e:25:b0:bc:59:d2:4d:fb:d1:12:d0:
                    65:05:ef:0f:48:4d:25:42:89:20:2c:72:32:e1:12:
                    6a:ac:06:e9:60:a8:8c:01:06:f6:c8:4d:dc:f7:8d:
                    15:1c:65:c5:33:5c:91:56:34:9e:68:8b:d2:a3:9c:
                    11:1b:b7:35:3d:18:06:37:2c:ce:8a:15:43:d6:a2:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:E1:C6:AC:01:40:D9:E5:B5:43:4D:C1:58:4C:45:0B:9E:EF:E0
            X509v3 Authority Key Identifier:
                keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:46:b1:e0:9e:a6:5a:5d:b4:b9:c2:a4:11:de:69:3b:dd:d8:
         cd:e4:f0:72:14:35:0e:cb:25:94:a0:b4:93:f7:d5:8e:d8:8f:
         43:5f:e7:1b:46:d9:fb:ae:5e:e2:f3:f5:7e:7f:a9:5b:04:38:
         04:f6:b5:be:f1:70:9b:2e:ba:4a:fc:be:bd:2d:f6:c8:ae:d7:
         8f:56:2b:8b:7b:86:8d:12:f1:a5:38:b2:3d:4a:ef:f9:cf:a5:
         d0:78:da:6c:78:81:14:20:d9:e3:e5:88:a2:3c:80:0f:a6:d9:
         ac:0c:dc:a4:96:ef:6c:c4:41:c5:6f:eb:7d:1a:b6:14:6f:b2:
         3d:08:ad:e7:51:48:55:64:24:47:81:d1:40:3c:57:01:dc:09:
         f8:b7:74:d9:cb:2e:77:3e:35:8b:01:46:42:ad:85:3c:47:cd:
         d4:5b:83:dd:2b:2e:38:86:4c:74:c1:f8:a3:29:44:d5:7e:69:
         c0:5f:a3:83:6c:a0:c0:cb:11:67:7c:71:3b:0c:c3:a4:74:e7:
         00:7d:1e:ad:d4:c8:79:9f:e1:8b:af:1d:4c:91:fd:b3:94:3c:
         b1:f2:0a:d3:97:a9:b0:a2:76:07:8b:59:cf:9c:0f:c9:59:4f:
         ab:b3:0b:40:cd:e7:b4:c3:7e:2c:0d:54:be:c7:4a:4f:e4:9d:
         c3:37:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----